Denial of Service Vulnerability in Cisco Adaptive Security Appliance
CVE-2016-1369

7.5HIGH

Key Information:

Vendor
Cisco
Status
Asa With Firepower Services
Vendor
CVE Published:
5 May 2016

Summary

A misconfiguration in the kernel logging of the Cisco Adaptive Security Appliance 5585-X with FirePOWER Services allows remote attackers to execute a denial of service attack. By flooding the system with crafted IP traffic, an attacker can exhaust resources and potentially disrupt inspection processes or cause a module outage. This weakness affects Cisco ASA versions 5.3.1 through 6.0.0, as noted in Bug ID CSCux19922.

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO
http://www.securitytracker.com/id/1035743
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.